From 139cc0c3d547fc7de7ea6318a85a4af1ef221b1a Mon Sep 17 00:00:00 2001 From: Joachim Metz Date: Wed, 4 Nov 2020 09:05:00 +0100 Subject: [PATCH] Changes to handle syslog in local time #3280 (#3281) --- plaso/parsers/syslog.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/plaso/parsers/syslog.py b/plaso/parsers/syslog.py index f47f2816f1..d22138a414 100644 --- a/plaso/parsers/syslog.py +++ b/plaso/parsers/syslog.py @@ -383,7 +383,8 @@ def ParseRecord(self, parser_mediator, key, structure): if not plugin: event = time_events.DateTimeValuesEvent( - date_time, definitions.TIME_DESCRIPTION_WRITTEN) + date_time, definitions.TIME_DESCRIPTION_WRITTEN, + time_zone=parser_mediator.timezone) parser_mediator.ProduceEventWithEventData(event, event_data) def VerifyStructure(self, parser_mediator, lines):